luca.scamoni@sys-net.it wrote:

hyc@symas.com ha scritto:

...

Good idea.

Also, I think the original LDAP message should still be intact, in frame 6 "msg" - perhaps you can extract the DN that was actually received and figure out why it had a problem.

This is the msg from frame 6

(gdb) p msg->lm_ber->ber_buf[0]@100 $4 = "\002\001\002d\202\0046\004\000\000\202\004003\004\tentryUUID\000&\004$6a0ba116-b291-11da-8006-87f6e679f1bd0*\004\vobjectClass\000\033\004\024cRLDistribution"

The second '\000' after '\004' (octet string) was probably put by ber_scanf("m") to terminate the string, but the first one seems to be the length of the octet string! So apparently the message actually contained an empty DN, which makes little sense. Could the error be at the provider's side?

p.

(gdb) p msg->lm_ber->ber_buf[100]@100 $5 = "Point\004\003top0\r\004\002cn\000\a\004\005CRL190&\004\fcreatorsName\000\026\004\024cn=directory manager0$\004\017createTimestamp\000\021\004\017200603131301" (gdb) p msg->lm_ber->ber_buf[200]@100 $6 = "20Z0/\004\025structuralObjectClass\000\026\004\024cRLDistributionPoint0\202\002X\004 certificateRevocationList;binary\000\202\0022\004\202\002.0\202" (gdb) p msg->lm_ber->ber_buf[300]@100 $7 = "\002*0\202\001\022\002\001\0010\r\006\t*\206H\206÷\r\001\001\005\005\0000\201\2101\v0\t\006\003U\004\006\023\002IT1\0270\025\006\003U\004\n\023\016Actalis S.p.A.1"0 \006\003U\004\v\023\031Servizi di certificazion" (gdb) p msg->lm_ber->ber_buf[400]@100 $8 = "e1<0:\006\003U\004\003\0233Regione Siciliana Certification Authority Cittadini\027\r090507070003Z\027\r090508070003Z0"0 \002\001\025" (gdb) p msg->lm_ber->ber_buf[500]@100 $9 = "\027\r060330073258Z0\f0\n\006\003U\035\025\004\003\n\001\001 10/0\f\006\003U\035\024\004\005\002\003\002\031(0\037\006\003U\035#\004\0300\026\200\024Ÿ\232á\027'ÃŒ\214»\004)i ,x"©<\226\210E0\r\006\t*\206H\206÷\r\001\001\005\005\000\003\202\001\001" (gdb) p msg->lm_ber->ber_buf[600]@100 $10 = "E6¥©×\023t"ía\235Z€²@(É(\222ÆGé'R!\234\€\027ªzÄ~l¹z\032ûÕ©êqÃ\202::c³áÈ#\n2±ÂÚ+A¯ÖŽ¥¶#ÃŒ^¡\003Í\030\235`š\032\027±ÍßvùOØ\230¶\233ã\004K\201&\r]É\233DÏ>]R" (gdb) p msg->lm_ber->ber_buf[700]@100 $11 = "4\213\t\a>X^Ê\224Þ]Ã¥\034#eÂQ\215îú×zb¯ÚfíPC«\202ã¯Z\177\024¯Œ%Óζ8\022ͯ<\234»ZÍk\213µ\bÂŒQÚ×Q\205\232Û¥\n3\212v\noÃ¥e+U\034Å\212\207\215\231+\2374«êÖN€¡\222\000±hËYž+ÃŽ8-" (gdb) p msg->lm_ber->ber_buf[800]@100 $12 = "à ¯\234\214ì8ÃŽa\177I§šk€\001N\217~,°>£\217\1771ÈóœxÛ\206Ù\214íO5Ì%5»:Á\206Âá\235ð?\nòVáãW"\21606\004\bentryCSN\000*\004(20090507070014.234380Z#00000" (gdb) p msg->lm_ber->ber_buf[900]@100 $13 = "0#000#00000005\004\rmodifiersName\000$\004"cn=manager,dc=a,dc=prod,dc=actalis0$\004\017modifyTimestamp\000\021\004\0172009050707" (gdb) p msg->lm_ber->ber_buf[1000]@100 $14 = "0014Z0\r\004\aentryDN\000\002\004\0000#\004\021subschemaSubentry\000\016\004\fcn=Subschema0\032\004\017hasSubordinates\000\a\004\005FALSE k0i\004\0301.3.6.1.4" (gdb) p msg->lm_ber->ber_buf[1100]@100 $15 = ".1.4203.1.9.1.2\004M0K\n\001\002\004\020j\v¡\026²\221\021Ú\200\006\207öÊyñœ\0044rid=002,csn=20090507070014.234380Z#000000#000#000000\0000%\000\000"

I fear the dn is already lost... :-(

Ing. Luca Scamoni Responsabile Ricerca e Sviluppo

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it

---

Office: +39 0382 573859 (137) Fax: +39 0382 476497 Email: luca.scamoni@sys-net.it

---